One day a process was eating up 90% of my CPU time, and its name was RUNDLL32. Arg, I hate that ! That little program is used to start COM objects and other nuisances. So then I patched RUNDLL32 to write its startup arguments to the event log. Once you've installed this tool, you'll see entries like the following in the Event Viewer Application Log:

RUNDLL32.EXE: GetCommandLineW(): "C:\WINNT\System32\RUNDLL32.EXE"

So you know what's up. I'm sorry I couldn't come up with a more reasonable name, but at that point I was simply annoyed.


This little hack is released as freeware, without any license attached. Use at own risk. Download here (6.241 bytes). You can also download the complete sourcecode (4.740 bytes).

Installation on Windows NT

Just extract rundll32.exe to your \winnt\system32 directory. Maybe you'll want to rename or backup your existing copy of rundll32.exe, you really should.

Installation on Windows 2000

Installation on Windows 2000 is a bit more tricky because of the stupid "System File Protection" stuff. Here's howto:

Note that the first step is vital, otherwise SFP will silently overwrite the patched version. Duh.

Installation on Windows XP

I have no idea, I don't use Windows XP.